CVE-2013-1164
First published: Thu Apr 11 2013(Updated: )
Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6 multicast packets, aka Bug ID CSCtz97563.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE Software | =3.4.0as | |
| Cisco IOS XE Software | =3.4.0s | |
| Cisco IOS XE Software | =3.4.1s | |
| Cisco IOS XE Software | =3.4.2s | |
| Cisco IOS XE Software | =3.4.3s | |
| Cisco IOS XE Software | =3.5.0s | |
| Cisco IOS XE Software | =3.6.0s | |
| Cisco ASR 1001 | ||
| Cisco ASR 1002 Fixed Router | ||
| Cisco ASR 1002-X | ||
| Cisco ASR 1004 | ||
| Cisco ASR 1006 | ||
| Cisco ASR 1013 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-1164?
CVE-2013-1164 has a severity rating of medium, primarily due to its potential to cause a denial of service.
How do I fix CVE-2013-1164?
To mitigate CVE-2013-1164, it is recommended to upgrade to Cisco IOS XE versions 3.4.4S, 3.5, or 3.6 or later.
What devices are affected by CVE-2013-1164?
CVE-2013-1164 affects Cisco ASR 1000 series routers running affected versions of Cisco IOS XE.
What type of vulnerability is CVE-2013-1164?
CVE-2013-1164 is a denial of service vulnerability related to the improper handling of fragmented IPv6 multicast packets.
Can CVE-2013-1164 be exploited remotely?
Yes, CVE-2013-1164 can be exploited remotely by attackers to trigger a card reload on affected devices.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/references
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xe software
- version/cisco ios xe software/3.4.0as
- version/cisco ios xe software/3.4.0s
- version/cisco ios xe software/3.4.1s
- version/cisco ios xe software/3.4.2s
- version/cisco ios xe software/3.4.3s
- version/cisco ios xe software/3.5.0s
- version/cisco ios xe software/3.6.0s
- canonical/cisco asr 1001
- canonical/cisco asr 1002 fixed router
- canonical/cisco asr 1002-x
- canonical/cisco asr 1004
- canonical/cisco asr 1006
- canonical/cisco asr 1013